Assistant Vice President – Information Security - Hatton National Bank Colombo

About the Role:

Job Role The role of an Assistant Vice President - Information Security is to lead the Information Security function with the objective of maintaining cybersecurity. enhancing data security and privacy. conducting threat analysis and forensic investigations in order to ensure the integrity, confidentiality, and availability of information in alignment with the relevant laws, regulations, and standards, and the Bank's business objectives and mission. The role will be directly reported to the Chief Information Security Officer.

Duties and Responsibilities:

• Provide inputs in creating the Information Risk Strategy and create a roadmap to ensure adherence to overall objectives and goals 

• Spearhead the development and implementation of comprehensive information security management frameworks tailored to the Bank's specific needs and regulatory requirements. 

• Oversee the design and implementation of secure processing systems for payments, digital, and cyber assets to ensure the integrity and confidentiality of transactions by applying industry security standards and protocols. 

• Provide strategic direction to enterprise-level information security, promoting robust information security mandates and governance in line with global best practices. 

• Conduct data protection impact assessments to evaluate and mitigate risks associated with personal data processing. 

• Ensure compliance with regulatory standards, including the Electronic Transactions Act and the guidelines prescribed by the CBSL Conduct periodic risk assessments of the Bank's information systems, report findings to top management, and provide insights on cyber response and cyber resilience to the Board of Directors. 

• Champion the organization's values within the team, encouraging a collaborative and innovative work environment

Qualifications & Experience:

• A Degree from a recognized university in the fields of Computer Science, Information Technology, Information Security, Cybersecurity or a related field 

• Professional qualifications such as CISSP, CISM. CRISC, CISA are mandatory 

• A Master's Degree from a recognized university in the fields of Computer Science, Information Technology, Information Security, Cybersecurity, or a related field will be an added advantage

• A minimum of 15 years of experience in Information Security, with 4+ years of prior experience in a managerial role, preferably in a bank or a financial institution.

Competencies:

• Cybersecurity strategy 

• Risk assessment and management

• Information security governance 

• Budgeting and resource allocation

• Regulatory compliance 

• Forensic investigation